Monitoring and managing call rate to proxy

[#1]

Hello!

I would like to know if there is a way to monitor total number of calls made to company APIs. What will happen in the case of exceed calls limit (e.x. 1 million/3quarters for free account) ? And finally, is there a way to setup such call rate policy which will discard requests without incrementing this total limit of calls?

Cheers, Tomas

[anilsr · Accepted solution]

@Tomasz Korecki ,

Great Questions,

What will happen in the case of exceed calls limit (e.x. 1 million/3quarters for free account) ?

Apigee will allow the traffic even if limit is exceeded. We won't block any runtime traffic after the limit. Apigee will further follow up & suggest you to upgrade to the higher plan for the better uptime & performance.

Is there a way to setup such call rate policy which will discard requests without incrementing this total limit of calls?

You can always implement rate limit at proxy level using quota policies. This will hep you restrict access to developer apps according to your business needs. Let's say you would like to provide 1000 Calls / Month to your public developers, 100000 / Month to Partners & Unlimited access to internal teams. It can be achieve using Quota Policies.

Idea is, We don't want to affect your business with a certain number of calls at the company level. So, We allow traffic even if your Quarterly limits are exceeded. Hope it will be helpful.

[#3]

So exceeding the total limit of calls will have impact only on Apigee proxy performance? Could you provide any information about this impact?

But quota policies at proxy level still increment this total limit of calls, am I right? They purpose is to block request to my backend. At the end, those requests are still processed by Apigee gateway.

Thing is, Is there a way to prevent incrementing this total number of calls in the case of something like the HTTP flood attack.

[anilsr]

@Tomasz Korecki , It will not have any impact on existing proxy performance. It will work as usual even if limit is exceeded. Apigee Sales team will follow up with you regarding limits & work with you regarding plan upgrade.

Is there a way to prevent incrementing this total number of calls in the case of something like the HTTP flood attack.

Yes, to prevent DOS attacks please use SPIKE Arrest policy.

[#5]

@Anil Sagar

Just to be sure: requests rejected due to spike policy will not have an effect on total call rate limit, am I right?

[anilsr]

@Tomasz Korecki , Yes you are right.